Unrated severityNVD Advisory· Published Apr 8, 2008· Updated Apr 23, 2026
CVE-2008-1087
CVE-2008-1087
Description
Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."
Affected products
14- cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows-nt:2008:*:itanium:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows-nt:2008:*:itanium:*:*:*:*:*
- cpe:2.3:o:microsoft:windows-nt:2008:*:x32:*:*:*:*:*
- cpe:2.3:o:microsoft:windows-nt:2008:*:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- www.securityfocus.com/bid/28570nvdPatch
- secunia.com/advisories/29704nvdVendor Advisory
- www.securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www.us-cert.gov/cas/techalerts/TA08-099A.htmlnvdThird Party AdvisoryUS Government Resource
- marc.infonvdMailing List
- www.osvdb.org/44215nvdBroken Link
- www.vupen.com/english/advisories/2008/1145/referencesnvdBroken Link
- docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5580nvd
- www.exploit-db.com/exploits/5442nvd
- www.exploit-db.com/exploits/6656nvd
News mentions
0No linked articles in our index yet.